---
typeId: req
recordId: benac-enc-005
fields:
  title: Authenticated associated data
  statement: Benac shall authenticate encryption metadata as associated data,
    including object type, cryptographic profile version, content-identity
    profile, structured-object encoding profile where applicable, expected
    plaintext or ciphertext CID where applicable, data class, intended use, lease identifiers
    where applicable, creator principal where applicable, and recipient
    information where appropriate.
  rationale: Encrypted objects must not be recontextualized without detection.
  verification: Tampered AAD fixture fails decryption or integrity verification.
  testable: true
  status: draft
  area: BENAC-ENC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.6 Encryption, decryption, and disclosure control
  order: 59
---
